Install the lock screen PAM stack and replace the missing screensaver effects

docs/install.md

@@ -97,6 +97,7 @@ with `--check`.
    | `/etc/sddm.conf.d/zz-blob.conf` | Wayland greeter, run on Hyprland, stock theme, remember the last session |
    | `/etc/sddm/hyprland-greeter.lua` | the greeter's own tiny Hyprland config |
    | `/usr/local/bin/blob-hw-gpu-accelerated` | the renderer check that config runs, where SDDM's user can read it |
+   | `/etc/pam.d/blob-lock-password` | the PAM stack the lock screen authenticates against |
 
    The greeter config matters more than it looks: SDDM's stock Wayland greeter
    runs on `weston`, which Blob does not install, so a default SDDM would fail
@@ -145,6 +146,18 @@ with `--check`.
 | `--autologin` | skip the SDDM prompt for this user |
 | `--no-launch` | leave the login screen for the next reboot |
 
+## The lock screen
+
+The lock plugin watches `/etc/pam.d/blob-lock-password` and refuses to lock at
+all when it is not there - `blob system lock` returns `missing-pam` and nothing
+appears, which reads as a keybinding that does nothing. The installer writes it;
+it is one line including `system-auth`, the same stack every other Wayland
+locker on Arch authenticates against.
+
+Fingerprint unlock is separate and opt-in: `blob setup-security-fingerprint`
+writes `/etc/pam.d/blob-lock-fingerprint`, and the lock only offers fingerprint
+when that file and a reader are both present.
+
 ## Choosing a renderer
 
 Hyprland renders through Mesa, and on an adapter Mesa has no driver for it exits

docs/packages.md

@@ -70,7 +70,7 @@ Two are worth knowing about:
 
 ```
 packages/blob.packages       121 packages from core, extra, multilib
-packages/blob-aur.packages    10 packages with no official equivalent
+packages/blob-aur.packages    11 packages with no official equivalent
 ```
 
 Only missing packages are touched, through `pacman -S --needed` and
@@ -127,6 +127,7 @@ Omarchy's own package list, because they were installed by hand on this machine:
 | Package | Needed by |
 | --- | --- |
 | `python-pywal16` | `blob-wallpaper-set`, palette extraction |
+| `python-terminaltexteffects` | `blob-screensaver`, the effects it draws |
 | `awww` | the wallpaper daemon `blob-wallpaper-set` and `blob-theme-menu` drive |
 | `playerctl` | the quick settings media row |